{"id":4856,"date":"2017-10-23T22:35:10","date_gmt":"2017-10-23T14:35:10","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=4856"},"modified":"2017-10-23T22:35:31","modified_gmt":"2017-10-23T14:35:31","slug":"sqliv-sql-injection-dork-scanning-tool","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2017\/10\/sqliv-sql-injection-dork-scanning-tool\/","title":{"rendered":"SQLiv &#8211; SQL Injection Dork Scanning Tool"},"content":{"rendered":"<p>SQLiv is a Python-based massive SQL Injection dork scanning tool which uses Google, Bing or Yahoo for targetted scanning, multiple-domain scanning or reverse domain scanning.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/10\/SQLiv-SQL-Injection-Dork-Scanning-Tool-640x282.png\" alt=\"SQLiv - SQL Injection Dork Scanning Tool\" width=\"640\" height=\"282\" class=\"aligncenter size-medium wp-image-4857\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/10\/SQLiv-SQL-Injection-Dork-Scanning-Tool-640x282.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2017\/10\/SQLiv-SQL-Injection-Dork-Scanning-Tool.png 684w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<h2>SQLiv Massive SQL Injection Scanner Features<\/h2>\n<p>Both the SQLi scanning and domain info checking are done in a multiprocess manner so the script is super fast at scanning a lot of URLs. It&#8217;s a fairly new tool and there are plans for more features and to add support for other search engines like DuckDuckGo.<\/p>\n<ul>\n<li>Multiple domain scanning with SQL injection dork by Bing, Google, or Yahoo<\/li>\n<li>Targetted scanning by providing specific domain (with crawling)<\/li>\n<li>Reverse domain scanning<\/li>\n<\/ul>\n<h2>Using SQLiv For SQL Injection Dorks Scanning<\/h2>\n<h4>Multiple domain scanning with SQLi dork<\/h4>\n<p>Simply search multiple websites from given dork and scan the results one by one:<\/p>\n<pre>python sqliv.py -d <SQLI DORK> -e <SEARCH ENGINE>  \r\npython sqliv.py -d \"inurl:index.php?id=\" -e google<\/pre>\n<h4>Targetted scanning<\/h4>\n<p>You can provide just the domain name or specific URLs with query parameters. If only the domain name is provided, it will crawl and get URLs with queries then scan the URLs one by one.<\/p>\n<pre>python sqliv.py -t <URL>  \r\npython sqliv.py -t www.example.com  \r\npython sqliv.py -t www.example.com\/index.php?id=1<\/pre>\n<h4>Reverse domain and scanning<\/h4>\n<p>Reverse domain scan and look for websites that are hosted on the same server as target URL.<\/p>\n<pre>python sqliv.py -t <URL> -r<\/pre>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<h3>SQLiv Dork SQL Injection Tool Usage<\/h3>\n<pre>python sqliv.py --help\r\n\r\nusage: sqliv.py [-h] [-d D] [-e E] [-p P] [-t T] [-r]\r\n\r\noptional arguments:\r\n  -h, --help  show this help message and exit\r\n  -d D        SQL injection dork\r\n  -e E        search engine [Google only for now]\r\n  -p P        number of websites to look for in search engine\r\n  -t T        scan target website\r\n  -r          reverse domain<\/pre>\n<p>There is nothing else exactly like this, there are tools for information gathering via dorks like:<\/p>\n<p>&#8211; <a href=\"https:\/\/www.darknet.org.uk\/2017\/06\/snitch-information-gathering-tool-via-dorks\/\">snitch \u2013 Information Gathering Tool Via Dorks<\/a><br \/>\n&#8211; <a href=\"https:\/\/www.darknet.org.uk\/2017\/07\/dork-cli-command-line-google-dork-tool\/\">dork-cli \u2013 Command-line Google Dork Tool<\/a><\/p>\n<p>And SQL Injection tools like:<\/p>\n<p>&#8211; <a href=\"https:\/\/www.darknet.org.uk\/2017\/08\/jsql-automatic-sql-injection-tool\/\">jSQL \u2013 Automatic SQL Injection Tool In Java<\/a><br \/>\n&#8211; <a href=\"https:\/\/www.darknet.org.uk\/2017\/09\/bsqlinjector-blind-sql-injection-tool-download-ruby\/\">BSQLinjector \u2013 Blind SQL Injection Tool Download in Ruby<\/a><\/p>\n<p>You can download SQLiv here:<\/p>\n<p><a href=\"https:\/\/github.com\/Hadesy2k\/sqliv\/archive\/2.0.zip\">sqliv-2.0.zip<\/a><\/p>\n<p>Or read more <a href=\"https:\/\/github.com\/Hadesy2k\/sqliv\">here<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>SQLiv is a Python-based massive SQL Injection dork scanning tool which uses Google, Bing or Yahoo for targetted scanning, multiple-domain scanning or reverse domain scanning. SQLiv Massive SQL Injection Scanner Features Both the SQLi scanning and domain info checking are done in a multiprocess manner so the script is super fast at scanning a lot [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"","_seopress_titles_title":"","_seopress_titles_desc":"SQLiv is a Python-based massive SQL Injection dork scanning tool which uses Google, Bing or Yahoo for targetted, multiple-domain or reverse domain scans.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9],"tags":[10650,284,439,1235],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4856"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=4856"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/4856\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=4856"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=4856"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=4856"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}